Muddled Libra Staging Archive goon.zip Written To Disk

Daniel Jeremiah@daniyyell

•updated Feb 28, 2026•0•20

Detects creation or modification of goon.zip, an attacker staging archive reported by Unit 42 in a Muddled Libra intrusion.